Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135322e302f32332d3233203d3e20323633363431.roa
File:                     3137392e3132372e3135322e302f32332d3233203d3e20323633363431.roa (raw, json)
Hash identifier:          X8ZYApHUR05da1LEduMNwRwLsWoKvWexEOz1Od2u2OY=
Subject key identifier:   BA:D0:FA:0D:BA:8F:08:05:89:91:BD:0B:54:8A:87:42:DA:6D:DA:55
Certificate issuer:       /CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
Certificate serial:       5338142958D85372015126D26CCC8333EFAE4B13
Authority key identifier: 8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135322e302f32332d3233203d3e20323633363431.roa
Signing time:             Tue 09 May 2023 14:22:02 +0000
ROA not before:           Tue 09 May 2023 14:17:02 +0000
ROA not after:            Tue 07 May 2024 14:22:02 +0000
asID:                     263641
IP address blocks:        179.127.152.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:38:14:29:58:d8:53:72:01:51:26:d2:6c:cc:83:33:ef:ae:4b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
        Validity
            Not Before: May  9 14:17:02 2023 GMT
            Not After : May  7 14:22:02 2024 GMT
        Subject: CN=BAD0FA0DBA8F08058991BD0B548A8742DA6DDA55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c4:a3:f1:af:f0:a3:ca:31:b6:05:6d:00:3a:
                    a0:61:70:27:36:d1:35:4c:5c:e5:79:49:c1:41:8f:
                    43:68:b1:81:3b:38:63:3a:9f:cc:e4:a6:31:a3:9f:
                    9e:68:37:1f:dc:0b:43:31:9b:14:9e:e5:5f:ae:5b:
                    04:af:e0:e1:7c:07:2a:1d:8c:7f:44:6e:40:69:e5:
                    9e:a3:23:70:e5:0c:22:75:4a:50:cc:88:46:cc:05:
                    df:8a:65:2e:64:d5:95:ff:91:b1:76:8b:2b:68:04:
                    01:ba:9e:2d:39:1d:58:18:b0:19:93:1c:49:6b:d7:
                    79:2d:40:86:2b:cd:cd:d4:7b:e4:4b:15:6f:ef:61:
                    2f:f6:0b:6e:68:48:a2:3d:52:45:17:b3:58:db:f0:
                    ed:84:4d:bf:a9:75:3b:0d:59:b3:ea:28:04:6c:5c:
                    d0:e9:d7:95:09:c5:f7:12:3a:5a:22:55:f6:ff:f6:
                    12:f7:a0:28:a5:50:5a:ce:dd:d1:a5:25:48:6f:0a:
                    35:88:09:16:4e:1a:af:a8:2b:17:39:26:2f:34:62:
                    d0:5b:96:36:2a:8c:4f:7f:f9:01:c0:e3:ed:9a:e2:
                    0a:82:be:e6:b5:56:db:ae:52:0d:0c:1f:48:a8:ad:
                    a5:d7:b5:a7:6c:74:f5:3b:15:66:bf:df:60:d5:2d:
                    47:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D0:FA:0D:BA:8F:08:05:89:91:BD:0B:54:8A:87:42:DA:6D:DA:55
            X509v3 Authority Key Identifier:
                keyid:8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135322e302f32332d3233203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:5e:fd:a3:b5:6c:d6:15:44:83:e5:79:32:8d:a3:ac:b2:ca:
         f3:0a:8d:9f:54:19:97:c1:b8:6d:09:21:17:20:08:dc:d6:39:
         38:67:c9:aa:f3:89:1e:c3:2e:ea:4e:0b:95:20:99:69:9a:5e:
         d6:d9:65:d0:3d:e8:3d:07:e4:ac:81:fe:74:e0:4b:62:5c:e4:
         76:38:d5:33:ea:6a:31:47:16:b6:6c:8d:d2:e4:ff:b8:c0:e3:
         e8:9b:ed:9b:72:40:43:a1:23:5c:44:c0:4d:d6:53:f2:f1:4a:
         fb:d3:32:fa:d0:a7:3d:0e:8e:38:5e:3f:62:bc:d5:6e:51:dc:
         86:e7:d9:21:a1:a4:8c:f7:e2:cc:d3:db:11:9b:19:f5:fb:8d:
         2d:a1:48:17:30:99:1f:c5:40:af:9f:5d:d4:34:e1:1f:7f:55:
         97:3c:bb:cf:40:2a:39:c1:25:0c:23:1c:50:ca:64:de:2d:c1:
         1f:d2:da:0d:30:78:06:c7:56:9b:e5:b0:fb:d5:ef:4a:95:2c:
         75:2a:73:34:af:b9:68:21:26:c0:bc:dc:60:c5:38:a1:b0:84:
         57:fb:69:ea:a8:06:36:39:fe:aa:b5:cf:99:8c:27:b7:f1:f2:
         48:76:07:07:7a:7d:49:a4:09:09:bf:83:4d:1e:c2:01:85:82:
         f3:71:cf:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org